Add tenant data-residency routing pinning records to a region-specific shard

[thlpkee20-wq]

Description

Some tenants require data to remain in a specific jurisdiction. Add a residency tag per tenant and a routing layer that selects the correct shard or read replica; cross-region writes must be rejected.

Requirements and context

• Must be secure, tested, and documented
• Should be efficient and easy to review
• Relevant code: src/db/, src/middleware/
• Residency mismatches must emit security audit events

Suggested execution

• Fork the repo and create a branch
• git checkout -b feat/data-residency-routing
• Implement changes
  • Add tenants.residency_region and shard map
  • Middleware sets AsyncLocalStorage region; pool selects accordingly
  • Block cross-region writes with explicit error code
• Validate security and correctness assumptions

Test and commit

• Run tests
  • npm test
• Cover edge cases
  • Missing residency tag must fail closed
• Include test output and notes

Example commit message

feat: tenant data residency routing

Guidelines

• Minimum 95 percent test coverage
• Clear documentation
• Timeframe: 96 hours

[Emmzyemms]

@Emmzyemms has applied to work on this issue as part of the Stellar Wave Program's 6th wave.

I’m interested in contributing to this issue and believe I can deliver a clean, well-tested solution that aligns with the project’s standards.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Emmzyemms to this issue.

[modecodes]

@modecodes has applied to work on this issue as part of the Stellar Wave Program's 6th wave.

hello maintainer pls i can help resolve this issue., i have experience building secure backend infrastructure and multi-tenant systems and I'll implement region-aware routing that enforces tenant data residency while failing closed when configuration is missing. I'll add the required middleware, shard selection logic, cross-region write protection with audit events, and comprehensive tests and documentation to ensure the feature is secure, maintainable, and easy to review

ℹ️ Repo Maintainers: To accept this application, review their application or assign @modecodes to this issue.

[Prz-droid]

@Prz-droid has applied to work on this issue as part of the Stellar Wave Program's 7th wave.

GM Maintainer! I'd like to work on this issue. I have experience building secure backend systems with Node.js and TypeScript, and I'll implement tenant-aware data residency routing with region-based shard selection, AsyncLocalStorage context propagation, and strict enforcement of cross-region write restrictions. I'll ensure residency mismatches are audited, missing residency tags fail closed, and the implementation is thoroughly tested, documented, and easy to review.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Prz-droid to this issue.

[Adedayo-Data]

@Adedayo-Data has applied to work on this issue as part of the Stellar Wave Program's 7th wave.

Hi Maintainer, I would love to take up this task. I have read the requirement and would be able to meet up with the expectations. My Expected delivery time is 24 hours. Thanks

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Adedayo-Data to this issue.

[Aishat004]

@Aishat004 has applied to work on this issue as part of the Stellar Wave Program's 7th wave.

please can i work on the issue

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Aishat004 to this issue.